Security News Intel Patches Firmware Flaw That Leaks ME Encryption Keys

[LASER_oneXM]

Content source

https://www.inforisktoday.com/intel-patches-firmware-flaw-that-leaks-me-encryption-keys-a-11513

Researcher Finds Intel's Previous Management Engine Patches Weren't Foolproof

Intel has had a challenging time lately on the vulnerability front. Computer security researchers have dug deeply into the chip manufacturer's wares, finding vulnerabilities such as Meltdown, Spectre and Foreshadow, all of which proved to be difficult to fix or mitigate.


Now, another problem has emerged. Intel has patched a very serious firmware vulnerability, CVE-2018-3655, which could potentially leak encryption keys stored inside its Management Engine. The ME is a crucial microchip with code that brokers communications between a processor and external devices and helps with power management as well as starting up a computer's main processor.

Here's Intel's list of affected components and the new, post-patch firmware version numbers:
...
....
.......

 

[Local Host]

After trying to manipulate the stock market due to AMD gains, Intel is facing karma.

 

[DeepWeb]

Went to the site. Intel says we should wait for the manufacturers to update Intel ME..... LMAO so never?

 

[Tume]

That's why

 

[SHvFl]

@Tume You are so right. Amd is immune to any kind of exploits and is protected by both the fairy godmother and the tooth fairy...